CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2025-31917	WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player allows Reflected XSS. This issue affects Universal Video Player: from n/a through 3.8.3. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31638	WordPress Spare <= 1.7 - Cross Site Scripting (XSS) Vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31635	WordPress CLEVER <= 2.6 - Arbitrary File Download Vulnerability Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LambertGroup CLEVER allows Path Traversal. This issue affects CLEVER: from n/a through 2.6. CVSS: HIGH (7.5) EPSS Score: 0.06% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31429	WordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data Vulnerability Description: Deserialization of Untrusted Data vulnerability in themeton PressGrid - Frontend Publish Reaction & Multimedia Theme allows Object Injection. This issue affects PressGrid - Frontend Publish Reaction & Multimedia Theme: from n/a through 1.3.1. CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31426	WordPress Sticky Radio Player plugin <= 3.4 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Sticky Radio Player allows Reflected XSS. This issue affects Sticky Radio Player: from n/a through 3.4. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31424	WordPress WP Lead Capturing Pages plugin <= 2.3 - SQL Injection vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav WP Lead Capturing Pages allows Blind SQL Injection. This issue affects WP Lead Capturing Pages: from n/a through 2.3. CVSS: CRITICAL (9.3) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31398	WordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data Vulnerability Description: Deserialization of Untrusted Data vulnerability in themeton PIMP - Creative MultiPurpose allows Object Injection. This issue affects PIMP - Creative MultiPurpose: from n/a through 1.7. CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31396	WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability Description: Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5. CVSS: CRITICAL (9.8) EPSS Score: 0.05% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31061	WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist allows Reflected XSS. This issue affects Wishlist: from n/a through 2.1.0. CVSS: HIGH (7.1) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)
CVE-2025-31059	WordPress WBW Product Table PRO <= 2.1.3 - SQL Injection Vulnerability Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in woobewoo WBW Product Table PRO allows SQL Injection. This issue affects WBW Product Table PRO: from n/a through 2.1.3. CVSS: CRITICAL (9.3) EPSS Score: 0.04% Source: CVE June 9th, 2025 (about 1 month ago)